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Abstract 

Kabanets and Impagliazzo KI04] show how to decide the circuit polynomial identity testing 
problem (CPIT) in deterministic subexponential time, assuming hardness of some explicit 
multilinear polynomial family {f m } m >i for arithmetic circuits. 

In this paper, a special case of CPIT is considered, namely non-singular matrix com- 
pletion (NSMC) under a low-individual-degree promise. For this subclass of problems it 
is shown how to obtain the same deterministic time bound, using a weaker assumption in 
terms of the determinantal complexity dc(/ m ) of f m . 

Hardness-randomness tradeoffs will also be shown in the converse direction, in an effort 
to make progress on Valiant's VP versus VNP problem. To separate VP and VNP, it is 
known to be sufficient to prove that the determinantal complexity of the m x m permanent 
is m"( lo s m ). In this paper it is shown, for an appropriate notion of explicitness, that the 
existence of an explicit multilinear polynomial family {/ m } m >i with dc(/ m ) = 
equivalent to the existence of an efficiently computable generator {G n }„>i for multilinear 
NSMC with seed length 0(n 1/ ^"). The latter is a combinatorial object that provides an 
efficient deterministic black-box algorithm for NSMC. "Multilinear NSMC" indicates that 
G n only has to work for matrices M(x) of poly(n) size in n variables, for which det(M(a;)) 
is a multilinear polynomial. 



1 Introduction 

Let F be a field of characteristic zero, let Q C F denote the field of rational numbers, and 
let X n = {xi,X2, ■ ■ ■ ,x n } be a set of variables. Ap(X n ) denotes the set of affine linear forms 
over X n and F. In this paper we study a special case of circuit polynomial identity testing, 
namely the non-singular matrix completion problem over F. Matrix completion is an important 
problem, both in theory and in practice. The history of the problem dates back to work by 
Lovasz [Lov79| and Edmonds [Edm67j. 

As was done in [DSY08J for CPIT, we study non-singular matrix completion under a 
promise restriction on individual degrees: 

"This work was supported in part by the National Natural Science Foundation of China Grant 60553001, and 
the National Basic Research Program of China Grant 2007CB807900,2007CB807901. 
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Problem NSMC^(F) : kx k Non-Singular Matrix Completion over F with individual degrees 
at most r. 

• Input: A k x k matrix M(x) with entries in Aw(X n ). 

• Promise : Individual degrees of the polynomial det(M) are bounded by r. 

• Question: Does there exist a G F n such that det M(a) 7^ ? 

Over a field of characteristic zero, the problem is equivalent to asking whether detM(x) ^ 
0. Since det n has 0(n 6 ) size skew circuits [MV97], and is universal for skew circuits (Implicit 
in |Val79| . see Proposition I3.1H . NSMC^°^ n ' 1 (F) is equivalent to identity testing poly(n) size 
skew circuits over F, under the semantic promise that the circuit outputs a polynomial with 
individual degrees bounded by r(n). Over Q, for any r(n), the latter can be verified with a 
coRP-algorithm, using the Schwartz-Zippel Lemma [Sch80i |Zip79j . Moreover, Lovasz showed 
that a random assignment for x maximizes the rank of M(x) with high probability |Lov79| . 

Whether there exists an efficient deterministic algorithm for matrix completion is a major 
open problem. Currently, such an algorithm exists only for special instances. For example, 
Ivanyos, Karpinkski and Saxena give a polynomial time deterministic algorithm for finding a 
maximum rank completion, provided M(x) is of the form Mq + x\M\ + X2M2 + . . . + x n M n , 
where Mi , M2 , • • • , M n are rank one matrices (110!) . 

Kabanets and Impagliazzo provide algebraic hardness-randomness tradeoffs for CPIT 
[KI04]. They show that the existence of an explicit polynomial with super-polynomial arith- 
metic circuit size, implies CPIT, and hence NSMC, can be decided deterministically in time 2 n " , 
for any e > 0, provided n is large enough. In order to make progress towards unconditionally 
proven deterministic sub exponential time algorithms for NSMC, it is important to consider 
whether the same bound can be obtained for NSMC under any weaker assumptions. 

In this paper we will only assume hardness of an explicit polynomial for skew circuits, or 
equivalently, we make hardness assumptions in terms of determinantal complexity [MR04]. In 
other words, we aim for specialized algebraic hardness-randomness tradeoffs for the skew circuit 
model. For this, we will use the hardness-randomness tradeoffs for constant-depth arithmetic 
circuits due to Dvir, Shpilka and Yehudayoff [DSY08J as a starting point. 

Another motivation is the VP versus VNP question, or the permanent versus determinant 
problem [MR04]. The latter problem asks of us to prove lower bounds for the determinantal 
complexity of an explicit polynomial. We firmly establish the role of NSMC in the quest for 
such lower bounds, firstly, by the characterization mentioned in the abstract. Secondly, it is 
shown that the existence of an explicit multilinear polynomial family {f m }m>i with dc(/ m ) = 
m ^(i) i s equivalent to the existence of an efficiently computable multilinear generator {G n } n >i 
for NSMCf * y{n) with seed length \n e ] , for some < e < 1. 

2 Results 

We require some formal definitions to properly state the results. 

1 Necessarily in the sense of Definition ^. 21 A sufficient condition would require an even more stringent notion. 
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Definition 2.1 ([MR04]) The determinantal complexity dc(f) of a polynomial f € F[X„] is 
defined to be the minimum size of a matrix M with entries in Aw(X n ) such that detM = f . 

We use standard definitions of arithmetic circuits with binary addition and multiplication 
operations (See [BCS97] ). Arithmetic circuit complexity of / is denoted by L(f). A skew circuit 
satisfies that for every multiplication gate one of its inputs is a variable or a constant. L s k e w(f) 
denotes skew circuit size of /. The following is our notion of explicitness of a multilinear 
polynomial: 

Definition 2.2 Let {f m }m>i be a family of multilinear polynomials with f m € 
Z[xi, X2, • • • ,x m ]. We say this family is explicit provided there exists a deterministic Turing 
machine running in time 2°( m ) , that on input e € {0, l} m , outputs the binary representation of 
the coefficient of the monomial x^x^ 2 ■ ■ ■ x e ™ of f m . 

Hardness Hypothesis 1 (HHQ]) There exists an explicit family of multilinear polynomials 
{fm}m>i, such that L(f m ) = mM 1 ). 

Hardness Hypothesis 2 (Hr|2| There exists an explicit family of multilinear polynomials 
{fm}m>i, such that dc(f m ) = 

If in the above we replace m u ^' by refer to this as Strengthened HHJ] and 

Strengthened HHSJ 

Proposition 2.3 HHM is equivalent to the statement that there exists an explicit family of 
multilinear polynomials {f m }m>i, such that L s k ew {fm) = m^^. A similar statement holds for 
Strengthened HL^ but with mM 1 ) replaced by m u> ^° sn ^ . 

Proof. In one direction this follows from the fact that the nxn determinant has skew circuits 
of size 0(n 6 ) [MV97], For the converse, apply the fact that if f m can be computed by a skew 
circuit of size s, then dc(/ m ) = O(s) (Implicit in |Val79| . see Proposition 13, ip . □ 

Proposition 2.4 Strengthened HhU\ Strengthened HUB => HHJ\ HHM ■ 

Proof. The first and the last implication follow from Proposition 12.31 To show that 
Strengthened Hid => HUH suppose we have an explicit multilinear p-family {/ m } m >i, such 
that dc(/ m ) = m w ( logm '. This implies dc(/ m ) = m aJ ( logm ), even when restricting to m € Ai, for 
any infinite set A4. If L(f m ) m"^ 1 ), then there exists constant c > and infinite set A4' , such 
that L(f m ) < m c , for all m € A4' . Using the construction of [VSBR83], we obtain formulas for 
f m of size 2°( lo g L (/™) lo § m ) = m °( lo s m ), for m G M' . Hence by [ValTO] . dc(/ m ) = m °^ m \ for 
m € M! . This is a contradiction. □ 

Our algorithms will be of the black-box kind. This is formalized as follows: 
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Definition 2.5 For a function £ : N — > N, a multilinear (£(n), n) -generator /or NSMC^(F) is 
given by a multilinear polynomial mapping G n : F^ n ) — * F" . We say G n provides a test for 
NSMCj!(F), if for any instance M(x) o/NSMC£(F) ; it holds that 

{3a G F n ),det M(a) + iff {3b G F^), det M{G n {b)) ^ 0. 

Families {G n } n >i of generators are also simply called "generator" . For a generator {G n } n >i 
with coefficients in Z, we say it is efficiently computable, if there exists a deterministic Turing 
machine M that runs in time so that on input (z, n, e), where z and n are given in binary 

and e G {0, l}^ n \ M computes the binary representation of the coefficient of the monomial 

X^X<2 ■ ■ ■ •Eg.On) *-*f {Gn)i- 

We are now ready to state the results. 

Theorem 2.6 If HL^ holds over F ; then for any < e < 1, there exists an efficiently 
computable multilinear {\n e ~\,n)- generator {G n } n >i, such that for any k{n) G and 
r{n) G 0{\), G n provides a test for NSMC^"j(F) ; for all large enough n. 

Theorem 2.7 // Strengthened HL{^ holds over F, then there exists an efficiently computable 
multilinear (0 '(ra 1 ' v/ ' ogn ),n)- generator {G n } n >i, such that for any k{n) G and r{n) G 

2 0{VW^) ; G n provides a test for NSMC^j(F), for all large enough n. 

From this we will derive the following: 

Theorem 2.8 // HL^ holds over Q, then non-singular matrix completion over Q for matri- 
ces M{x) of poly (n) size and with coefficients of poly (n) bits, where the individual degrees of 
det{M{x)) are constant bounded, can be decided deterministically in time 2 nS , for any e > 0, 
provided n is large enough. 

Theorem 2.9 // Strengthened HI{M holds over Q ; then non-singular matrix completion over 
Q for matrices M{x) of poly (n) size and with coefficients of poly (n) bits, can be decided de- 
terministically in time 2°( ral/ '' /losn lo § n ) ; under the promise that individual degrees of det{M{x)) 
are bounded by 2°(v /I ^) . 

A central technical part of this paper is the following "Root Extraction Lemma" for skew 
circuits, which is of independent interest: 

Lemma 2.10 Let n,s, and m be integers with s > n. Let P{x,y) G F[X n ,y] be a non-zero 
polynomial such that L s }~ ew {P) = s. Let f G F[X n ] be a polynomial with deg(/) = m such that 
P{x, f{x)) = 0. Then L skew {f) < s ■ 2°( lo s 2 ™) r 4 + lo s m , where r = deg y {P). 

Finally, we also prove the following randomness-to-hardness results: 

Theorem 2.11 // for some < e < 1, there exists an efficiently computable multilin- 
ear (|~n e ],n)- generator {G n } n >i, such that for any k{n) G n ^\ G n provides a test for 
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NSMCj(F), for all large enough n, then Upholds over F. 

Theorem 2.12 If there exists an efficiently computable multilinear (0(n 1// ^ logn ), n)- generator 
{G n } n >i, such that for any k{n) E , G n provides a test for NSMC^ n ^(F) ; for all large 
enough n, then Strengthened HUM holds over F. 

Theorem 12.121 & Theorem 12.71 and Theorem 12.111 & Theorem 12.61 provide us with charac- 
terizations, which we summarize as follows: 

Corollary 2.13 

1. HI{Mholds overF if and only if there exists an efficiently computable multilinear (\n e ~\,n)- 
generator {G n } n >i, for some < e < 1, such that for all k{n) £ n ^\ G n provides a test 
for NSMC^^F), for all large enough n. 

2. Strengthened HB^ holds over F if and only if there exists an efficiently computable mul- 
tilinear (0(n 1 ^ logn ), n) -generator {G n } n >i, such that for all k(n) € n°^\ G n provides 
a test for NSMC^^F), for all large enough n. 

2.1 Comparison to Other Work 

Part (i) of Theorem 7.7 in |KI04| can be phrased as follows: 

Theorem 2.14 Assume HB^holds over Q. Let C be a poly{n)-size arithmetical circuit overli 
computing an n-variate polynomial f n of total degree poly{n) and maximum coefficient size at 
most poly {n) . Testing whether f n = can be done deterministically in time 2™ e , for any e > 0, 
provided n is large enough. 

Theorem 12.81 matches the time bound of Theorem 12.141 Thus we have shown an important 
special case of CPIT, for which deterministic subexponential time algorithms exist under weaker 
assumptions than was known previously. Similarly, Theorem 12.91 matches the time bound 
implicitly provided by Theorem 7.7 in [KI04J under Strengthened HHH but using a weaker 
assumption. 

3 Preliminaries 

For a polynomial /, Hfc(/) denotes the homogeneous part of degree k, and H<k(f) = 

An algebraic branching program (ABP) over F U X n is given by a directed acyclic graph 
G with source node s and sink node t. Edges of G are labeled with elements of X n U F. The 
weight of a directed path in $ is defined to be the product of the edge labels. The polynomial 
computed by $ is defined to be the sum of weights over all directed s, t-paths. For the size of $ 
we count the number of edges in G. For a polynomial /, B(f) is the size of any smallest ABP 
computing /. This generalizes in the obvious way to multi-output ABPs, by have several sink 
nodes t±, t2, ■ ■ ■ , t m . One easily proves the following proposition: 
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Proposition 3.1 L skew {f) = 9(B(/)). 



We will use this to switch freely between skew circuits and ABPs. The latter model gives us 
some convenience. For example, for ABPs it is easy to see that if f(x±,X2, ■ ■ ■ , x n ) is computed 
an ABP A of size sa, and g is computed by an ABP B of size sb, then f(g,X2, ■ ■ ■ ,x n ) can 
be computed by an ABP of size O(sasb)- Indeed, simply replace each edge labeled with x\ in 
A with the s,t-d&g given by B. Addition and multiplication of ABPs is done by parallel and 
series composition, respectively. 

Proposition 3.2 Suppose Q is a skew circuit of size s computing f G F[X n ]. Then for any i, 
there exists a skew circuit of size 0(s ■ i) computing Hj(f) for all < j < i. 

Proof. This is achieved using the standard homogenization trick of keeping for each gate in <I>, 
i many copies that compute the homogeneous components up to degree i. □ 

Lemma 3.3 (cf. Lemma 2.4 in |DSY08j ) Suppose P(x,y) G ¥[X n ,y] can be computed by 
a skew circuit over ¥ of size s. Then for any i, can be computed by a skew circuit of size 
0(r ■ s), where r = deg y (P). 

Proof. Let C(x, y) be a skew circuit for P of size s. We can compute Co (a:), Ci(x), . . . , C r (x) 
with an r + 1-output skew circuit of size 0(r-s) by evaluating C(x,a,j) at r + 1 distinct elements 
a\,a2, ■ ■ ■ , a r +i € F, and then use linear interpolation. Next we can compute by adding 
0(r 2 ) many gates. Since r < s, the lemma follows. □ 

Lemma 3.4 (Lemma 2.1 in |Alo99] ^ Let f € ¥[X n ] be a non-zero polynomial such that the 
degree of f in Xi is bounded by r{, and let Si CF be of size at least ri + 1, for all i G [n]. Then 
there exists (si, S2, ■ ■ ■ , s n ) G 5i x S2 x . . . x S n with /(si, S2, ■ ■ ■ , s n ) ^ 0. 

Lemma 3.5 (Nisan-Wigderson Design [NW94]) Letn,m be integers withn < 2 m . There 
exists a family of sets Si, £2, . . . , S n C [£], such that (1) £ = 0(m 2 / logn), (2) For each i, 
\Si\ = m, and (3) For every i 7^ j, \S{ D Sj\ < logn. Furthermore, the above family of sets can 
be computed deterministically in time poly (n,2 £ ). 

Berkowitz [Ber84! observes that Samuelson's algorithm [Sam42] for computing the char- 
acteristic polynomial, does not use divisions and can be implement in NC 2 (Also see |MV97j ). 
From this one derives the following statement, sufficient for our purpose: 

Proposition 3.6 The determinant of an n x n matrix M with integer entries of at most m 
bits each can be computed in time poly(n,m). 
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4 Root Extraction within the Skew Circuit Model 



We start with the observation that Theorem 3.1 in [DSY08] can be modified into the following 
lemma. A proof sketch is provided in Appendix lAl 

Lemma 4.1 Let n,s, and m be integers with s > n. Let P(x,y) £ F[X n ,y] be a non-zero 
polynomial with s = L skew (P). Let f € F[X n ] be a polynomial with deg(/) = m such that 
P(x, f(x)) = 0. Then L skew (f) = 0(s ■ rm r+1 ), where r = deg y (P). 

Comparing this with the s ■ 2°( lo s 2m V 4 + lo s m bound of Lemma 12.101 which can be bound 
by s ■ m°^ ogm+logr \ we see that we get a significant improvement for any m « 2 r . 

Let us briefly indicate the idea behind the proof of Lemma 12.101 Similar as was done in 
[DSY08J, we want to to approximate / up to some degree k, i.e. find a polynomial g with 
H<k(f) = H<k{g)- In [DSY08] this is done in increments of k by one. This will not be good 
enough for our purpose. Due to the nature of the skew circuit model, typically any increment 
of k requires duplication of previously constructed circuitry, leading to an overall exponential 
blowup by a factor of 2 m . The solution is to aim for a faster convergence rate that doubles k 
in stages. This way, one can keep circuit blow-up due to duplications more or less in check. 

We now proceed with the proof of Lemma 12.101 In the following, for any polynomial q the 
homogeneous component H t [q] will also be denoted by qt- 

Lemma 4.2 Let P € ¥[X n ,y] be such that deg y (P) = r. Write P = Ya=o Ci{x)y % , and let 
P'(x,y) = ELo^'^y -1 - Let f G F[Xn] be such that P(x,f(x)) = and P'(0,/(0)) = £ + 
0. Let k > 1 be an integer. Suppose g G F[X n ] satisfies H<k[g\ = H<k[f]. Then for any 
1 ' ./ ' /■•• 

fk+j = 9k+j ~ 7- ( P(x,g) k+j + V7/fc+i - gk+i)P'(x,g)j-i ) ■ 

Proof. Let h = (f k+x - g k+i ) + . . . + (f 2 k ~ 92k)- Then 

= H< 2k [P(x,f(x))] 
= H< 2k [P(x,g + h)] 

r 

= H^ k [J2Ci(x)(g + hy] 

i=0 
r 

= H^^Ciix) (g l + i ■ j- 1 ■ h)} 
i=0 

= H< 2k [P(x,g)+P'(x,g)-h] 

Let 1 < j < k be given. 

3 

= P(x,g) k+j + ^2(f k+i - g k+ i)P'{x,g)j-i 
i=i 
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i-i 

= P{x,g) k +j + (fk+j - gk+j)P'(x,g) + ^(/ft+i - 9k+i)P' \x, g)j-i 

i=i 

Since P'(x,g) = P'(0,g(0)) = P'(0,/(0)), the lemma follows. □ 
Applying the above lemma for g = H<ck(f) yields the following corollary: 

Corollary 4.3 Let P G ¥[X n ,y] be such that deg y (P) = r. Write P = Yf i=0 Ci(x)y\ and let 
P'(x,y) = YJi^iCiix)^- 1 . Let f G ¥[X n ] be such that P(x,f(x)) = and P'(0,/(0)) = £ + 
0. Let k > 1 be an integer. Then for any 1 < j < k, 

fk+j = \P(x, g)k+j + Yl fk+i ■ P '( X i 9)j-ij , (!) 

where g = H< k [f). 

Lemma 4.4 Let P G ¥[X n ,y] be such that deg y (P) = r. Write P = Yli=o Ci{x)y % , and let 
P'(x,y) = ELo^^)^" 1 - Let f € ¥ l X n] b e such that P(x,f(x)) = and P'(0,/(0)) = ^ + 

0. Let k > 1 be an integer. Let 

V = {P(x, g) j :l<j<2k}U {P'(x, g)j : 1 < j < k - 1}, 

where g = H<k[f]- Suppose any polynomial in V can be computed by a single output ABP 
of size at most B. Then for any 1 < j < k, there exist (j + 1)- output ABP &j computing 

1, fk+i, fk+2, fk+j of size at most 2Bj 2 . 

Proof. We prove the lemma by induction on j. For j = 1, we see by Corollary 14.31 that 
fk+i = —^P(x, g)k+j- Hence we have an single output ABP computing fk+i of size at most 
B. This means we certainly can compute 1 and fk+i by means of a 2-output ABP of size at 
most 2B. 

Now suppose 1 < j < k. By induction hypothesis we have j output ABP 3>j_i of size at 
most 2B(j — l) 2 computing 1, fk+i, /fe+2> • • • , fk+j-l- The ABP &j is constructed from 
by first of all passing along all of 1, fk+x, fk+2, ■ ■ ■ ,fk+j-i to the outputs. Then by drawing 
wires from each of these we can compute fk+j according to Equation ([T]). For this we use a 
new copy of a single output ABP computing some polynomial in V exactly j times. A picture 
of the construction can be found in Appendix This construction can be implemented such 
that size(&j) < size(<&j-\) + jB + j + 1 < 2Bj 2 (For this exact count we use that the cross 
wires are not actually needed, since we can identify nodes). □ 



Lemma 4.5 Let n,s,r,m and be integers with s >n. Let P G F[A„,y] be a non-zero polyno- 
mial with deg y (P) = r. Write P = YH=o ^i(x)y l , and let P'(x,y) = Ya=o iCi(x)y l ~ l . Assume 
that both P and P' can be computed by skew circuits of size at most s over ¥. Let f G F[X n ] 
be a polynomial with deg(/) = m such that P(x, f(x)) = and P'(0, /(0)) ^ 0. Then f can be 
computed by a skew circuit of size at most s ■ 2°( log m ) r 3 + lo s m . 



S 



Proof. We compute / in at most [log m] stages. At stage i we construct an ABP computing 
H< 2 i[f] of size Si. 

To start, for stage i = 0, since H <2 i[f] is an affine linear form in n variables, can be 
constructed with sq = 0(n). 

We now describe stage i, for i > 0. Let g = H <2 i-i [/]. In the previous stage an ABP 
was constructed for g of size Sj_i. 

We claim P(x, g) and P'(x, g) can be computed by an ABP of size 0(rsj_i + r 2 s). Namely, 
like in proof of Lemma 13.31 we have for any i, an ABP of size 0(rs) computing Ci{x). Using 
r copies of the ABP computing g we can then compute Yll=o Ci(x)g l with size 0(rsj_i + r 2 s). 
Similarly, for P'(x,g). 

Hence, by Proposition 13.21 and Proposition 13.11 for any j < 2*, P(x,g)j can be computed 
by an ABP of size 0(2*(rsj_i + r 2 s)). Similarly, for any j < 2* , P'(x,g)j can be computed 
by an ABP of size 0(2 i - 1 (rs i -i + r 2 s)). 

Therefore, we can apply Lemma [4. 41 with k = 2 l ~ 1 and B := 0(2*(rsj_i + r 2 s)). This gives 
us an ABP <I>2fc computing fk+i, fk+2, ■ ■ ■ > $2k of size at most 2Bk 2 . Combining ^ and to 
add all components of / gives us the ABP computing H< 2 k[f] OI si ze 0(2 3 *(rsj_i + r 2 s) + 
Sj_i). We can thus bound Si < ar2 3i • (sj_i + rs), for some absolute constant a > 1. From this, 
one gets that Si < s ■ f3 l +1 r l+2 , for some absolute constant j3 > 1. 

Taking i = [log m] , we see there exists an ABP computing / with size bounded by s ■ 
20(log m) r 3+logm_ Applying Proposition [3TT1 completes the proof. □ 

4.1 Proof of Lemma 12.101 

Write P = TJi=oCi{x)y i with C r (x) ^ 0. Let P\x,y) = g^. Then P r (x,?/) = r! • C r (x). 
Since the characteristic of F is zero, r! ^ 0, and hence P r (x,f(x)) ^ 0. By assumption, 
P (x, f(x)) = 0. Let i be the smallest number such that P % (x, f(x)) ^ 0. Then < i < r, and 
P t ^ 1 (x, f (x)) = 0. By Lemma E3] there exists x G F such that P*(x , /(^o)) 7^ 0. 

Let Q(x,y) = P 1 ^ 1 {x + XQ,y), and let g = /(a; + xo). Q is computable by a skew circuit 
of size 0(r ■ s) by Lemma [3.31 Let Q' = Observe Q'(x,y) = P t (x + Xo,y). Q is a 

nonzero polynomial such that Q(x,g(x)) = P l ~ 1 (x + xo,f(x + Xq)) = 0, and Q' (0,5(0)) = 
P 1 (xq, /(xq)) ^ 0. We apply Lemma 14.51 and obtain a skew circuit ^ computing g(x) of size 
s .2°( lo s m) r 4+iogm^ p rom ^^jg a s k ew circuit computing / is obtained that is at most a constant 
factor larger by performing the substitution x := x — xq within ^. □ 



5 Constructing a Generator from a Hard Polynomial 

With the "Root Extraction" Lemmas 12.101 and 14.11 proved, the following lemma follows by the 
technique of Lemma 7.6 in [KI04], which was also employed to prove Lemma 4.1 in [DSY08J. 
The proof can be found in Appendix [Bl 

Lemma 5.1 Let n,r and s be integers, and let g 6 F[A n ] be a non-zero polynomial with 
individual degrees bounded by r with L s ) cew (g) = s > n. Let m > logn be an integer 
and let S%, S2, ■ ■ ■ , S n Q [£] be given by Lemma \3.5[ so that £ = 0(m 2 /logn), \Si\ = m, 
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and \Si fl Sj\ < logn. Let f E ¥[zi, Z2, ■ ■ ■ , z m ] be a multilinear polynomial such that 

0(/(y|si),/(y|s a ),..^/(v|sJ) = 0. Tften L skew (f) < sn ■ mm(2 c ^ 2 ™) r 4 + log ™, c 2 • m r+1 ), 
/or absolute constants c\ , c 2 > 1 . 

5.1 Proof of Theorem EH and 12771 

Proof. We first consider Theorem 12.71 Suppose {fm} is an explicit multilinear family with 
dc(f m ) = m aJ ( logm \ Consider some large enough n. Set m = [2a v/logri ] . Construct the Nisan- 
Wigderson design Si, S2, ■ ■ ■ ,S n as in Lemma [5.11 with t(n) = 0(m 2 /logn) = 0(n 1 ^ logn ). We 
claim the required (£(n), n)-generator G n can given by 

G n (yi,y2, ■ ■ ■ ,y£( n )) - (fmiyls^^miy^), ■ ■ -,fm(y\s n )), 

To verify this, consider any k{n) € and r(n) € 2°( v ' logn ), and arbitrary k(n) x fc(n) 

matrix M(x) with entries in Af(X n ). Let g = det(M(x)). Assume the individual de- 
grees of g are bounded by r(n) = poly{m). Observe it suffices to verify that if g z£ 0, 
then det(M(G n (y))) ^ 0. Due to [MV97| . we know g has a skew circuit over F of size 
at most 0{n ■ k(n)®) < n^, for some constant d (provided n is large enough). Hence 
by Lemma 15.11 if det(M(G n (y))) = 0, we obtain a skew circuit over F for f m of size at 
most n d+1 • 2 c i( log2m ) r (n) 4+logm < 2 4 ( d+1 ) log2 m ■ 2 c i( lo g 2 m ) r (n) 4+logm Since r(n) = poly{m) 
and n is assumed to be large enough, this contradicts the hardness of f m . (Here we use 
dc(/ m ) = 0(L skew (f m ))). 

For Theorem 12.61 one argues similarly, but with m := \n e ~\. We bound the size of the skew 
circuit for f m by C2n d+1 ■ r(n)m r< ^ +1 < C2r(n)m^ d+1 ^ e+r ^ +1 . This contradicts the hardness 
of f m , assuming dc(/ m ) = m-W, for any constant < e < 1 and r(n) = 0(1), provided n is 
large enough. 

We now check that in any of the above cases, {G n } n >i is efficiently computable. Given 
(i,n, e), where e € {0, l}^ n \ one first constructs the sets Si, S2, ■ ■ ■ , S n . This can be done 
deterministically in time 2°^ n " by Lemma 13.51 Then if for some j Si, ej = 1, return zero. 
Otherwise, let c = e^. Return the coefficient of the monomial x^x 1 ^ 2 ■ ■ ■ x c ™ of f m . Since f m 
is explicit, this coefficient can be computed deterministically in time 2°( m \ Hence the total 
deterministic time is bounded by 2°^ n ^ . □ 



Remark 5.2 From the above we see an ( \n e ~\ , n) -generator for NSMC^p (F) can be obtained 

by assuming dc(f m ) = m UJ ( r ( ml/t ^ . For example, assuming dc(f m ) = m a; ( loglogm ) yields an 
(|~n e ],n)- generator for NSMC^^g^(F), for any < e < 1. This observation is useful for 
r(n) = o(logn). Once r(n) = O(logn), we known we are working under Strengthened HL^ 
which implies HL^ and we obtain an (\n e ~\,n)- generator for CP IT from Theorem \2.14\ 

6 Using the Generator to decide NSMC(Q) Deterministically 

Theorem 6.1 Let £{n) and r(n) be functions of type N — » N such that logn < £(n) < n, 
for all large enough n. If there exists an efficiently computable multilinear (£(n),n) -generator 
{G n }n>i, such that for any p(n) € n ^, G n provides a test for for NSMC^S(Q) , for all large 
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enough n, then for any k(n) G n°W, NSMC^J(Q) can be decided deterministically in time 
20(£(n) log n+£(n) log r(n)) ^ ■provided coefficients of the input matrix have bit size n oi - l \ 

Proof. Say G n is defined over variables zi, Z2, . . . , z^r n y Consider an arbitrary matrix M of 
size k(n), with entries in AQ(X n ), where coefficients have bit size n 0<yl \ and with individual 
degrees of det(M(x)) bounded by r(n). We assume wlog. that entries of M are in Az(X n ), 
since we can multiply out all denominators and still leave bit sizes bounded by n oi - l \ 

For large enough n, by Definition [23J (3a G Q n ),det M(a) ^ iff (3b G 
Q^ n )), det M(G n (o)) + 0. Let m = £(n). We have that (36 G Q m ), det M(G n (&)) ^ if 
and only if h := det M(G n (z)) ^ 0. Individual degrees of h are at most nr(n). By Lemma 13.41 
if h ^ 0, then for some b G V m , h(b) ^ 0, where V = {0, 1, . . . , nr(n)}. Hence we can use the 
following test, for any n larger than some fixed threshold depending on k: 

Algorithm Test (input : an instance M{x) of NSMC^(Z)) 

1. Let V = {0,1,... ,nr(n)}. 

2. For all b G V^ n \ compute v b := det(M(G„(6))). 

3. If for all b G V^ n \ v b = 0, then Reject else Accept. 

If the above algorithm accepts, one also knowns a non-singular completion. Let us estimate 
the running time. Since G n is efficiently computable, for any b G V^ n \ G n (b)j can be computed 
in time 2°^ m \ Each entry of iV := M(G n (b)) is an integer computable in time 2°( m \ By 
Proposition 13.61 det (TV) is computable in time poly(k(n), 2°( m )) = 2°^ m \ Hence the total time 
is bounded by 2°( m ) • (nr(n) + l) m = 2°( ml °g"+ mlo s r (")). □ 

Using Theorem 16. 1( the proofs of Theorem 12.81 and Theorem 12.91 immediately follow from 
Theorem 12.61 and Theorem 12.71 respectively. 

7 Constructing a Hard Polynomial from a Generator 

Let 5 > 0. We say a function £ : M>o — > M>o is S-nice if 1) i is monotone increasing, 2) 

£(t) 1+s < t and \£(t + l) 1+s - £(t) 1+5 \ < 1, for all large enough t, and 3) for all large enough 

N, given N in unary, we card compute an n such that N = \£(n) 1+s ~\ deterministically in time 
2 0(AT)_ 

Theorem 7.1 Let 5 > 0, and let £ : M>o — ► M>o be a 5-nice function. Given any efficiently 
computable multilinear (\£(n)~\,n)- generator {G n } n >i, we can construct an explicit multilinear 
family {gN}N>i, such that if for some integer d > 0, G n provides a test for NSMC" d (F) for all 
large enough n, then for all large enough N, c?c(gjy) > £~ 1 (N 1 /( 1+S ^) d , over the field F. 

2 Note: conditions 1) and 2) imply the n in condition 3) always exists, provided JV is large enough. 
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Proof. Consider some large enough N. Let n be such that N = \l(n) l+ ] (such n can be 
found in time 2°^). Let m = \£{n)\ . We have that N < n. Let V = {1, 2, . . . , N + 1} C F. 
SimilarljH as in |Agr05| , define the polynomial qn{x\, X2, ■ ■ ■ , xat) = X)jc[i at] c -f Tiiei x ii where 
cj is taken to be an integer nonzero solution of the following system of linear equations: 

^ ci JjGn(ai,a 2 , • • • ,a m )i = 0, (2) 
IC[X,N] iei 

for all a G V m . These are (N + l) m equations in 2^ variables. Provided n is large enough, 
mlog(iV 1) < iV, and hence there exists a nonzero solution over F. The technical conditions 
placed on £(t) ensure is defined for all large enough N. Below we will argue how to compute 
an integer solution within time 2°( N > , so that gjy is explicit in the sense of Definition 12,21 

For purpose of contradiction, suppose that dc(<7jv) < n ■ Hence we can write gw = det(M), 
where M is an n d x n d matrix with entries in Af(X^). The entries of M are elements of 
Aw(X n ), since Af{Xn) C Av(X n ). Since F is an infinite field and g^ j£ 0, there exists a € F n 
such that det(M(a)) = gN {0^1,0,2, ■ ■ ■ ,cln) 0- The individual degrees of gjy are bounded by 
one. Hence, by Definition 12,51 there exists b G F m such that gN(G n (b)i, G n (b)2, ■ ■ ■ , G n (b)N) = 
det(M(G n (6))) ^ 0. This implies h £ 0, where h(z) := g N (G n (z) 1 ,G n (z) 2 , . . . ,G n (z) N ). 
Observe that individual degrees of h are bounded by N. Hence by Lemma 13.41 there exists 
b' 6 V m such that h(b') ^ 0, but this contradicts ©. Therefore dc(g N ) > n d > £- 1 (N l ^ 1+ ^) d , 
for all large enough N . 

We now argue how to obtain an integer solution to (|2|). Since G n is efficiently computable, 
we can compute any coefficient G n (ai,ci2, ■ ■ ■ ,a>m)i by summing over all 2 m monomials. This 
takes time 2°( m \ We write ([2]) as Ax = 0, for an r x 2 N matrix A, with integer coefficients of 
bit size 2°^ and r = (N + l) m . To construct A takes time 2°W. 

First, we want to find an independent set S of rank(A) many rows of A, and then extend 
S to an independent set of size 2^. Let ex, e-2, ■ ■ ■ > g 2 n denote the standard basis row- vectors of 
F 2 . One can do this as follows: 

1. let Vi equal row i of A, for i £ [r], and let v r+ i = e,, for i G [2^]. 

2. let 5 = 

3. for i = 1 to r + 2 W 

4. let S' = S U {ui} 

5. compute /3 = det (BB T ), where B is the |S"| x 2^ matrix of rows in 5'. 

6. if (3 ^ 0, then set S = S' 

By the Binet-Cauchy Theorem, det(BB T ) = Ylic2 N |J|=|5'| [d e t(-S/)] 2 ; where Bj is the 
\S'\ x 1 5" I matrix consisting of the columns in I of B. Hence (3 7^ if and only if there exists a 
set I of 1 5' I independent columns in B. The latter holds if and only if S' is an independent set. 

3 Agrawal Agr05] works with a different notion of a generator, and does not demand integer coefficients for 
explicitness. 
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The above procedure therefore maintains the invariant that after execution of line [61 S is an 
independent set with {v\, . . . ,Vi} C span(S) (We use the convention that is an independent 
set with span(@) = {0}). This implies that after the rth iteration, S contains rank(A) many 
rows of A, and after the final iteration, S is a basis. 

Entries of BB T have bit size 2°(N). By Proposition ESI det(BB T ) can be computed in 
time 2°( N \ Hence the above procedure takes time 2°^' in total. 

Let B be the matrix consisting of the rows in S computed by the above procedure. B is 
computable in time 2 0<yN \ Consider the adjugate adj(B). It satisfies B ■ adj(B) = det (£?)/. 
Hence we can pick a nonzero column from adj(B) that is a solution to the original system (J2J. 
The entry adj(B)ij = (— l) l+:, Mjj, where My is the determinant of the matrix B with rows 
i and j removed. The latter is an integer, and by Proposition 13.61 it is computable in time 
2°W. ' □ 

One proves Theorem l2 . 1 1 1 using Theorem 17. 1 1 with £(t) = t e , and selecting a small 5 > such 
that e(l + 5) G Q n (0, 1). Then t is 5-nice. This yields an explicit multilinear family {<?jv}iV>l, 
such that for any d, for all large enough N, dc(g N ) > N d /« 1+5 ». Hence dc(g N ) = A^ {1) - 

For Theorem l2.121 assume wlog. {G n } n >i is an efficiently computable multilinear (\£(n) := 
c • n l l^°& n ~\ , n)-generator, for constant c € Z>o- Then £ _1 (n) = 2 log ( n / c ), and £ is 5-nice, for 
5 = 1. Theorem 17.11 yields an explicit multilinear family {<7at}at>i, such that for any d, for all 

1/2 

large enough N, dc(g N ) > 2 a! - lo s 2 ( i V). Hence dc{g N ) = N W ^ N \ 
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A Proof Sketch of Lemma 14.11 

Write P = Yll=o C-i{x)y % . As in the proof of Lemma \2.1Q\ one can reduce to the case where 
§j^(0, (/(0)) ^ 0. One can now follow the proof of Theorem 3.1 in [DSY08] . The only thing 
that we need to observe, is that in "Part III- Finding a circuit for f(x)" we can compute the 
polynomial Q{z) using a skew circuit of size 0(m r ). By Lemma [3.3l we can compute each Ci(x) 
using a skew circuit of size 0(s ■ r) (This still holds regardless of the cost for reducing to the 
^(0, (/(0)) ^ 0-case). Hence Q(Cq(x), C\{x), . . . , C r {x)) can be computed by a skew circuit of 
size 0(s ■ rm r ) (See the remarks after Proposition 13. ip . Hence using Proposition 13.21 we obtain 
a skew circuit for / of size 0(s ■ rm r+l ). □ 



B Proof of Lemma 15.11 

Define so-called hybrid polynomials: 
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H (x,y) 
Hi(x,y) 
H 2 {x,y) 



= g(xi,x 2 ,...,x n ) 
= g(f(y\Si),x 2 ,...,x n ) 
= g(f{y\Si),f(y\S 2 ),...,x n ) 



H n {x,y) 



9(f(y\Si)J(y\S 2 ),...J(y\S n )) 



By assumption Hq ^ and H n = 0. Hence there exists a smallest number i such that 
Hi ^ and H i+1 = 0. 

We fix all variables Xj for i + 2 < j < n and all y^ not in Si+i to field constants by means 
of a substitution 5, such that after substitution still Hi ^ 0. This is possible by Lemma [331 
since F has infinite cardinality. Let /' and g' be / and g, respectively, after substitution S. 

We now have 



To simplify the discourse, rename X{ + \ by uu and the y- variables in S%+x by z\, z 2 , ■ ■ ■ , z, 
Equations ([3]) and ([!]) then yield we have a polynomial p such that 



Let us argue that p can be computed by an ABP of size 0(ns). Each f'(y\Sj D S{ + 1) is 
a multilinear polynomial in at most logn variables, and hence can be computed by an ABP of 
size 0(n). g' has an ABP of size at most O(s). Hence p can be computed by an ABP of size 



By Proposition 13.11 we have that L s k ew (p) = 0{ns). Since individual degrees of g are 
bounded by r, deg^p) < r. We apply Lemma 12.101 and Lemma 14.11 to conclude that / can be 
computed by a skew circuit of size at most sn ■ min(2 Cl ^ log m )r 4+logm ,c2 • rm r+1 ), for absolute 



g'(f'(y\S 1 nSi +1 ),f'(y\S 2 nSi +1 ),...,f'(y\S i nSi +1 ),x i+1 ) £ 
g'(f'(y\S 1 nS l+1 ),f'(y\S 2 nS l+1 ),...,f'(y\SinS l+1 ,f(y\S l+1 )) = 



(3) 
(4) 



p(zi,z 2 ,...,z m ,w) ^ 
p(zi,z 2 ,...,z m ,f(z 1 ,z 2 ,...,z m )) = 



0(ns). 



constants c\,c 2 > 1. 



□ 



c 
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P'(x,g)i 



& 

fk+l fk+j-1 Sk+j 

Figure 1: Construction of &j in the proof of Lemma 14.41 
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